Description
A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file.
Remediation
References
https://bugzilla.redhat.com/show_bug.cgi?id=1881637
https://github.com/amqphub/amqp-10-resource-adapter/issues/13
https://security.netapp.com/advisory/ntap-20201210-0001/
Related Vulnerabilities
CVE-2023-24444 Vulnerability in maven package org.jenkins-ci.plugins:openid
CVE-2023-32695 Vulnerability in npm package socket.io-parser
CVE-2023-24188 Vulnerability in maven package com.bstek.ureport:ureport2-core
CVE-2023-39410 Vulnerability in maven package org.apache.avro:avro
CVE-2020-2202 Vulnerability in maven package org.jenkins-ci.plugins:fortify-on-demand-uploader